Technology Jobs

  Senior IAM Architect Our client is a large international organisation seeking an Enterprise Security Architect to join their Group Information Security function, with a focus on Identity and Access Management. You will sit within the Security Architecture department, responsible for the domain-specific development and ongoing enhancement of a group-wide security architecture, with the goal of ensuring and continuously improving IT security and cyber resilience across the organisation. Key Responsibilities: Analyse cybersecurity IAM trends relevant to the organisation, including regulatory developments and emerging technologies such as AI, Cloud and Non-Human Identities Produce IAM-specific risk assessments as part of technical security architecture design, covering cost, benefit and risk reduction Evaluate IAM threat scenarios and design high-level IAM security architectures, including standards, baselines and reusable artefacts such as patterns and blueprints Drive stakeholder alignment and steer solution design and implementation as subject matter expert, including presenting in group-wide security forums Assess IT security posture against best practices and provide actionable recommendations aligned to ISO and NIST frameworks Your Profile: Degree in Computer Science or a comparable qualification Extensive experience in the Identity and Access Management domain, ideally including proven delivery of IAM architecture within large organisations Strong background in security architecture roles, covering both technology-specific and enterprise-level architecture including target state definition and roadmaps Hands-on experience with IAM platforms and tooling, ideally including: IAM: Microsoft Entra ID / Active Directory, Ping Identity, Okta PAM: CyberArk / BeyondTrust IGA: SailPoint / Oracle OIG Zero Trust: NIST 800-207 Understanding of attacker mindset and offensive security; certifications such as OSCP, CEH or equivalent are advantageous Ability to work independently and take ownership of complex technical topics Strong problem-solving mindset with a structured, solution-oriented approach Fluent in English; German language skills are an advantage

Director SOC Our client is a large international organisation seeking a senior leader for the newly created role of Director Security Operations. This is a central function responsible for overseeing and managing security vulnerabilities across the organisation's security landscape. You will be accountable for effective monitoring, detection and management of vulnerabilities across Cyber and Product Security, ensuring clear, organisation-wide visibility of threats and weaknesses to enable the relevant teams to act. The focus of this role is transparency, prioritisation and consistent follow-through — direct remediation and incident response are outside its scope. Key Responsibilities: Drive the development of organisation-wide security monitoring and detection capabilities Lead the enterprise vulnerability management framework, ensuring systematic identification, prioritisation and tracking of vulnerabilities across IT, cloud and product environments Build and operate a new Product Security Testing Centre, establishing scalable services for vulnerability analysis and penetration testing Provide decision-relevant situational reporting for IT operational security, product security, system owners and senior leadership including the CISO Act as the escalation point for systemic or uncontrolled vulnerabilities, ensuring transparency and clear accountability Your Profile: Proven experience leading functions in security monitoring, threat detection or vulnerability management Strong working knowledge of SIEM, vulnerability scanning and enterprise-scale testing platforms Experience independently leading an organisation-wide vulnerability management programme with the ability to prioritise on a risk basis Familiarity with product security testing, including penetration testing or fuzzing Track record of building scalable, repeatable operational processes with a focus on signal quality over tool proliferation

Security Incident Process Owner  Our client is a large international organisation seeking a Security Incident Process Owner to lead and continuously improve their Information Security Incident Management process in line with ISO/IEC 27035. You will take ownership of the incident management process, driving continuous improvement and ensuring effective coordination across multiple security domains. Key Responsibilities: Own and optimise the security incident management process and associated tooling Ensure alignment and integration across related functions including Information Security, Corporate Security, Product Security, IT Security, Data Privacy and Crisis Management Coordinate major security incidents and lead crisis management activity when required Define KPIs and drive continuous process improvement Ensure compliance with ISO standards and internal governance frameworks Collaborate with stakeholders, conduct emergency exercises and deliver training on incident management processes Your Profile: Degree in Computer Science, Business Administration, Organisational Management or a related field Extensive experience in security operations, incident response or process management Strong understanding of relevant security, incident and crisis management standards and frameworks, including ISO 27001 and ISO 27035 Professional certifications in relevant disciplines are advantageous Hands-on experience with incident management tooling such as SIEM and SOAR platforms Strong analytical skills with the ability to lead effectively under pressure and communicate clearly up to senior management level Fluent in German and English, both written and spoken Willingness to travel

Penetration Tester Location: Frankfurt Our client is a large international organisation seeking a Penetration Tester to join their information security team. You will join the information security team, helping to ensure products and projects are delivered securely. Key Responsibilities: Plan, execute and track penetration tests, evaluating findings and proposing mitigation actions. Produce clear test reports and maintain statistics for reporting and tracking purposes. Provide technical support to security functions including SOC, risk management and architecture. Coordinate activities such as bug bounties, SAST, DAST, audits and vulnerability scanning. Contribute to secure coding training and awareness initiatives. Serve as the internal point of contact for all penetration testing queries and follow up on findings. Your Profile: Degree in Computer Science, Business Informatics or equivalent IT experience. At least 3 years of hands-on penetration testing experience. Solid understanding of the cyber threat and vulnerability landscape. Certifications such as CompTIA PenTest+, CEH, GPEN or OSCP are advantageous. Self-driven and results-oriented, with the ability to work independently. Advanced English proficiency; additional languages are a plus.

OT/Automotive Cybersecurity Expert Freelance | Remote Start: June 2026  |  Duration: 6 months  |  FTE: 0.5–1.0  | German mandatory Are you a hands-on automotive cybersecurity specialist with real-world UNECE R155 and ISO/SAE 21434 project experience? We want to hear from you. Our client is seeking a seasoned freelance expert to join a high-impact automotive engagement - working remotely, with flexibility on commitment level, starting June 2026. Non-negotiable: Demonstrable, hands-on project experience with UNECE R155 and ISO/SAE 21434 is a hard requirement. Applications without this will not be progressed. What You'll Be Doing: Leading embedded cybersecurity engineering activities in line with UNECE R155 and ISO/SAE 21434, from TARA and Cybersecurity Concepts through to Security Cases at system and software level. Acting as Project Cybersecurity Manager within customer project teams, bridging the gap between software, hardware, systems engineering and the OEM. Developing cybersecurity concepts for embedded systems and interfaces spanning IT, production, software, system and hardware environments. Supporting cybersecurity audits and assessments across UNECE R155, ISO/SAE 21434 and ASPICE frameworks. What You Bring: Proven, hands-on project experience with UNECE R155 and ISO/SAE 21434 - mandatory. A track record as Project Cybersecurity Manager in OEM or Tier 1 environments. Strong command of TARA methodologies and embedded systems security. Familiarity with ASPICE processes. Fluent German - mandatory This is a strong opportunity for an experienced automotive cybersecurity professional to work flexibly on a technically demanding engagement, fully remote.

Interim CISO 9-Month Contract / Hybrid Location: Munich, Oslo, Stockholm, London A rare opportunity to operate at the intersection of cybersecurity and investment - advising high-growth companies, shaping deal decisions and building lasting capability across a dynamic portfolio. Our client is a well-regarded European investor backing some of the most exciting technology-driven businesses on the continent. With a hands-on approach to value creation, they embed senior expertise directly into their portfolio — and cybersecurity is central to that strategy. This is not a traditional CISO role. You won't be managing internal IT or writing policies for a single organisation. Instead, you'll work across a portfolio of ambitious, fast-moving companies - helping founders and leadership teams build security programmes that are practical, proportionate and commercially relevant. Key Responsibilities: Provide cybersecurity input across the full investment lifecycle, from early screening through to due diligence Translate technical findings into clear, decision-useful insights for investment professionals Act as a trusted advisor to portfolio company leadership, supporting prioritisation and execution of meaningful security improvements Advise on regulatory change, customer requirements and how to scale security capabilities effectively Build and lead a cybersecurity community across portfolio companies, driving knowledge sharing and peer learning Monitor developments in AI and emerging technology, helping companies adopt new tools securely and strategically What We're Looking For: Proven experience as a CISO, Head of Cybersecurity or equivalent senior role Strong technical grounding alongside genuine commercial awareness - you understand the business, not just the risk Experience in high-growth, scale-up or multi-stakeholder advisory environments The ability to assess cybersecurity through an investment lens, weighing risk, value and trade-offs A pragmatic, outcomes-focused approach — you know when good enough is the right answer Confidence engaging with founders, executives and investors alike Familiarity with AI-driven security tools and workflows Consultancy experience is a plus, but not a prerequisite What's on Offer? A genuinely varied, high-impact role - no two days or companies are the same The chance to position cybersecurity as a growth enabler, not just a control function A seat at the table on live investment decisions Flexible hybrid working across multiple European locations A 9-month engagement with a well-respected firm at the forefront of technology investment